State Laws Requiring Employee Notice of Federal I-9 Inspections

Summary

As of October 1, 2026, Washington employers must notify workers within five business days after receiving a federal Form I-9 Notice of Inspection, joining California and a growing group of states with similar rules. Multistate employers now face different deadlines, delivery methods, language requirements and penalties depending on where affected employees work.

This alert is written for in-house counsel and HR leaders. It summarizes each state’s requirements, compares them side by side, and closes with steps to build a single response protocol that satisfies all of them.

Background: the federal inspection process

A federal I-9 inspection starts when Homeland Security Investigations (HSI) serves a Notice of Inspection (NOI). The employer then has three business days to produce its Forms I-9 and any supporting document copies kept with them, and must not alter those records after the NOI date.

After review, HSI issues results that may identify technical violations, substantive violations, or documents that appear not to establish work authorization. Several states now attach employee-notice obligations to both events: receipt of the NOI and receipt of the results.

Because federal production runs on a three-business-day clock, the state notice clocks below often run at the same time as production. In practice, HR, counsel and payroll need to work both tracks in parallel from the moment the NOI arrives.

California: Labor Code section 90.2

California employers must notify current employees within 72 hours of receiving a Notice of Inspection. The rule has been in effect since January 1, 2018 (AB 450), and a federal challenge to these notice provisions did not succeed.

Notice of inspection. Within 72 hours, the employer must post a notice in the language it normally uses to communicate employment information, and give written notice to the employee’s authorized representative (such as a union), if any. The notice states the agency conducting the inspection, the date the NOI was received, the nature of the inspection to the extent known, and attaches a copy of the NOI.

Notice of results. Within 72 hours of receiving the inspection results, the employer must give each affected employee, and their authorized representative, a copy of the results that relate to that employee and written notice of the obligations of the employer and the employee arising from them. Delivery is by hand where possible, otherwise by mail and email.

Penalties. Civil penalties run from $2,000 to $5,000 for a first violation and $5,000 to $10,000 for each later violation, enforced by the Labor Commissioner. Confirm current amounts with counsel.

Related. California’s SB 294 (Workplace Know Your Rights Act) separately requires a stand-alone annual notice to employees covering, among other topics, rights related to immigration status; the first notice was due February 1, 2026.

Washington: Immigrant Worker Protection Act (RCW 49.97)

Washington’s IWPA (HB 2105) took effect October 1, 2026, and gives employers five business days to notify workers of an I-9 inspection. It covers every public or private employer with one or more workers in Washington, including state and local government.

Notice of inspection. Within five business days of receiving the federal notice, the employer must give written notice to each worker and the worker’s authorized representative, if any. The notice includes a copy of the federal NOI and the date it was received. It must be posted conspicuously until the inspection ends and also sent through the employer’s usual channels: hand delivery, mail with proof of delivery, or email or text with proof of transmission. Notices must be provided in English and the five other most common languages in Washington.

Safe harbor. An employer that uses the Attorney General’s model notice according to its instructions satisfies the notice requirement. Model notices are available in English, Spanish, Russian, Vietnamese, Ukrainian and Mandarin.

Notice of results. Within five business days of receiving results, the employer must notify each affected worker individually, redacting other workers’ information, and explain the obligations of the employer and the worker arising from the results.

Poster. Every employer must display the Attorney General’s IWPA workplace poster as of October 1, 2026. The poster asks the employer to fill in where it will post an inspection notice and how it will notify workers.

Enforcement. Penalties are $500 per instance of a missed notice, doubled for willful violations. The Attorney General can investigate and sue, and workers have a private right of action for damages, attorney’s fees and equitable relief. Retaliation is prohibited. Questions and reports go to IWPA@atg.wa.gov

Other states

Illinois: Right to Privacy in the Workplace Act (820 ILCS 55)

Illinois matches California’s 72-hour deadline. SB 508, effective January 1, 2025, requires employers to notify each current employee within 72 hours of receiving notice of an I-9 inspection, posted in English and any language commonly used in the workplace, with written notice to any authorized representative in the same window.

The notice names the inspecting entity, the date the employer received notice, the nature of the inspection to the extent known, and attaches a copy of the NOI. The Illinois Department of Labor publishes a template. Employees may request a copy of the NOI.

If the inspecting entity determines an employee’s documents do not establish work authorization, the employer must give that employee written notice within five business days, by hand where possible, otherwise by mail and email. The notice covers the determination, the time to contest it, any scheduled meeting, and the right to representation. If the employee contests, the employer must share any final determination within 72 hours.

IDOL enforces the law, and civil penalties scale with business size and the gravity of the violation. SB 508 also restricts E-Verify practices and requires a state E-Verify rights poster. The U.S. Department of Justice sued to block SB 508 in May 2025 (United States v. Illinois, No. 1:25-cv-04811, N.D. Ill.); employers should confirm the case’s current status, but the filing alone does not suspend compliance obligations.

Oregon: ORS 652.752

Oregon has the shortest clock: three business days from receipt of the federal notice, regardless of when the inspection actually takes place. In effect since 2019 under SB 370, the statute requires the employer to post the notice conspicuously in English and the language it typically uses with employees, and to make reasonable attempts to distribute it individually in each employee’s preferred language.

The notice includes a copy of the NOI, the inspection date, its scope to the extent known, the employer’s obligations, and a hotline number prescribed by the Bureau of Labor and Industries (BOLI). BOLI provides template notices in several languages. Oregon has no results-notice requirement, and the statute does not set a specific penalty for failing to notify.

Colorado: HB26-1283 (related, not an inspection-notice law)

Colorado’s new law adds a notice step during routine I-9 verification rather than at inspection. Signed and effective June 3, 2026, it bars employers from confiscating or retaining workers’ government-issued ID beyond narrow exceptions (originals generally no more than 10 hours). When reviewing documents for the I-9, employers must give a written notice of rights and keep a signed acknowledgment in the employee’s records. Multistate employers should add this to onboarding and reverification workflows for Colorado workers.

Watch list

Other states have not, as of this alert, enacted an I-9 inspection-notice law. Several legislatures have considered immigration-related workplace protections, and New York’s new personnel records law (effective November 8, 2026) prohibits retaliation by threatening to contact immigration authorities. Expect more states to follow the California–Washington model.

State-by-state comparison

California and Illinois’s 72-hour clocks are the tightest because they run through weekends and holidays; Oregon’s three business days is close behind. A protocol that notifies everyone within 72 hours of receiving the NOI meets every state’s first deadline.

Colorado is not shown because its HB26-1283 notice applies at routine I-9 verification, not at inspection.

Action items for in-house counsel and HR

The safest approach is one written I-9 inspection protocol that meets the strictest rule in each category, with state-specific add-ons. Recommended steps:

• Work with the Buchalter team to review your current I-9 practices, tailor this protocol to your workforce, and confirm compliance in each state where you have employees.
• Map where employees work, so you know which state laws apply to each worksite and to remote employees.
• Designate one intake point for any NOI (legal, HR or both) and require front-desk, site and mail staff to route it there the same day. Include counsel at Buchalter on the escalation list so we can advise from day one.
• Prepare state notices in advance from the official templates (CA Labor Commissioner, OR BOLI, IL IDOL, WA Attorney General), translated into required languages. Using Washington’s model notice gives you it’s safe harbor.
• Display required posters: Washington’s IWPA poster now, and Illinois’s E-Verify rights notice if applicable.
• Add Colorado’s HB26-1283 notice and acknowledgment to onboarding and reverification, and stop any practice of holding original ID documents.
• Schedule periodic independent I-9 audits, at least annually and after major hiring surges or acquisitions. Buchalter’s team routinely conducts I-9 audits and trains HR on best practice.
• Keep an evidence file for each inspection: NOI receipt date and time, copies of notices, posting dates and delivery proof.
• Train HR, site managers and recruiters on the protocol and on anti-retaliation rules.
• Disclaimer

This alert is for general information only and is not legal advice. Requirements, penalties and litigation status may change; consult counsel about your specific facts before acting.

Sources

• Washington AG: Immigrant Worker Protection Act
• California Labor Commissioner: Section 90.2 notice template
• Illinois Right to Privacy in the Workplace Act
• Illinois IDOL inspection notice template
• DOJ complaint, United States v. Illinois
• Oregon ORS 652.752
• Oregon BOLI: Federal inspections notice

This communication is not intended to create or constitute, nor does it create or constitute, an attorney-client or any other legal relationship. No statement in this communication constitutes legal advice nor should any communication herein be construed, relied upon, or interpreted as legal advice. This communication is for general information purposes only regarding recent legal developments of interest, and is not a substitute for legal counsel on any subject matter. No reader should act or refrain from acting on the basis of any information included herein without seeking appropriate legal advice on the particular facts and circumstances affecting that reader. For more information, visit www.buchalter.com.